MAL-2025-94047 Malicious code in disabled_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d7d33b8251ac4484b0cf6bfdcdc8ca58e6a35561875aa7df71b5438f38300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93497 Malicious code in certain_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79fc69288b04162a6a2d9654952eb85939939e6f74eb0c645c7ef6cd81460d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94197 Malicious code in elderly_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3930a467356e1d252bd1a3dbda398c7f4b4d43e671c73989352cc365761ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96642 Malicious code in smoggy_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea6645c8f7de4de5ccebd859fe41e162bf5fb32ec547d1f49d9b855230ad8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93644 Malicious code in comfortable_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858e8eb43eac025fb1a8949a822e08d503e8d2b93a505f21f5b1d95f38a3c441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93786 Malicious code in controlled_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bdc08b26a30dd0b3b29c037a6147540354d973085616cc5af5f9ed35fd9f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95619 Malicious code in necessary_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4bef3d4c401e70a1a0b3c25113db22fc7493c2a657b2f4e73a47e295df7500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65249

Malicious code in automaticcowz3n npm...

Malicious code in weak_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eeb180918efafdee77540193e317a1f667b4286179e2a4fb22c6a6fe84fa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-62470

Malicious code in protestantraccoonz3n npm...

Malicious code in delighted_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c682eecf3f8892d23d6bd6ea5dd7f454b3ebd15bfbfd029faed8dbe248a6d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa818affcaa219c16b3a52ef4009cd624923f5a0ab9861c1b680d4731e5d62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f783fc570cd33e19ca6dcc93aabe034fb8cc962942a1b9b16f5f8879ca1bfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf8f395288ab78fae5689dd3a2ae758b3840077d39f4e3a9dd59f8c054d5ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e7acb236bd95b568081a92e8f070f186b5784b5cb5e1ba2bf402a1bb08eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d562fe8f04edb14536575a37769fe001558fafcb59699f2a2f56394489b9b204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73850

Malicious code in satisfactoryanteaterz3n npm...

Malicious code in compatible_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee92b05240de0b1a2e92a9044e53b9fcabb324d062e43b72650593c2ef0dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c9d1e5ef8888cea90c2fc71c05ad72072a3490982779dc5a9ab1b03926baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91d4083fae9ef0688a7b954097d7280475fa54db76bbf2144d10e18995ec725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...